Daily Emotet IoCs and Notes for 11/14/19

Emotet Malware Document links/IOCs for 11/14/19 as of 11/15/19 00:15 EST

Notes and Credits at the bottom. Follow us on Twitter @cryptolaemus1 for more updates.

<none>
<none>
<none>

Payloads per Epoch by Document

Epoch 1 Payloads by Document SHA256 - All Times UTC

Creation Time	2019:11:14 23:11:00		(Attachment Only - Doc based - Enable Edition)
SHA256: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https://inter-mvietnam.com/wp-content/nxcrv2/
https://www.dollsqueens.com/wp-content/9ej40364/
https://www.redmediasigns.com/research/kigv66476/
http://ruanyun123.com/a92uw/3huyh88912/
http://qa-home.com/dlkc3/f0x0011/

Creation Time	2019:11:14 19:58:00		(Attachment Only - Doc based - Enable Edition)
SHA256:
00dbda701dafc4232418f83661e15f06df74543faaeb4490b108973091902bb0
0c409af5c3b21df29cca2afddda29d04a22a4e64370450532ea08b1511c1cfdc
0e60d443e5d7e2d454935621a48e126560462c285672dae8d1ccefaf7e251146
147cdf289a4a55a16ece4151d2297c03464727e812684102a1252c1d51721d1e
184cf7997d86c35db34c7d4b1cafaffe7a1ef698beea61f3b04c1ae92f068799
1d9d7e4e60680b410484e0990d574c4cf1e020720bc6e1b2d523d735eda1270a
1f7c197a2cabf38f6fbc6503ea5f73d1d115109d7282061cdd44cb2aaf091747
2daefdafabc05749cd5697aba3341019639f1df88418465e91c6661e0c22fca9
3f7ede944d73c726759d91158458f50ce9bd0e9ef911a7ae3608906f6128fbc7
4630b9d98bc471af15bc52593c0525bdeff36abaf6e048cefd59236d396cf9e5
4bbe8e8ae1e9e3546f2ecbbb6fb64da69cfa93f4ed1786509acefd6b7b4a955b
4d74e840478d3af16d1471e0a82f77ddaa94b5a74355cfc8c605cc93e9a4e6d7
590f4ee3ea1710199c0916101b24b62e55ab6485ada28bb37d57888a9da8f1c4
5b0ca85a9355f8d6ca0dc946c66fd56febb3ecfb0f4792533ca87da739800656
5e9555c30e06a2118943de42c71bd1533c829b802395afd28467a168b69f7216
672eb28278c3c8f1e51b9d9d9a8d0eef53be88355e71f68782a164b5bbf665c3
68b9be14afb5825c81f240f1717e12255d2f74080c4dc8918a83f12c41717b80
6929e50b7244d78f8c55ffdc098e05d24cbae2a1dbcf2404fc9e69476a060beb
6a834fc6443a50e46608177e3fa7b09514d281c08aab2576ee335f88be3ee863
768c05469f50a57a9b4689e01a318091f48fec31d35db231d8f56ff4c03e8024
7a8a5e874b1ea96c4f07c7c28ff65f5d81d47326ca26dadefce8042142e9d5d4
807eefd073b29e8795a9bf40810b9952a311a942af22496840513866e6062b94
819e20e55525ac14afcfea4e0ece714b14cbeab7597d6ee52e970dac05722abf
897680e3b88bc985e2b04016c477f9a4c2d92110a901e9b559afd1712db229fd
8dbfce223cea7f5f5e65e7b8762caa7ed5f000d44c2529d9c2ff837508596397
a6150319ad0d618de259443acad446b86e919e30cf2e60819e2c737f796a67b5
aa9a11143f7700ac131ab320276ceea9587264b193efbbc2c99b2e7f886af69c
ab33ce7f7e40d37bd205df8d0f7dd7d25f571fafeeb35636db28464e774a9726
ac1611f3a6d14a7658e00041ec8828aa4382ef11867c09704d498bbcec4594ba
af39f6c8cee4f6212a9e2283c6d01354bdd777a8fdfc14e83c70d22cc1c90ae6
af89569bf30f4d6e64677c975793f5eade61ed7487830228b159e423c37440ce
b09b923395f30bf51737cceb283902bd71b7b7ad22b76ee58cc0606495c55ff2
b0bcb0cca3b0243ab5253d35f9b388c740c0c80c52b59df057503323dd43e0b1
b18b3f9388921106eff55b81791e53136e057f1a13d81f27d0af9c08f9610615
b69066e0b657ecca22fa46bb9b7037da12d29de493df2cbbb816a830c9b39131
c0927db50101f6ce39976291b5737535f3b2692837b0a6cccae1b77baf84f29d
c990f2f2c4985c21c2fce837df5d696e5ec0134374eee3776ff4e9666260fb22
ca8153e695f569fabb48a9aa4fd409d9ea284780163f93889c3fb181719116f4
d9b7cd956de7ae08c7a68a5dad71c7a6ff682b9e302a2ce38313116302405cb1
dc318d31998d41fe577353be0e6e4391c678eb76256e0f9212887f34f57b613f
de0876315b7ec85e669ebe90dd6af49a5528f8eda2f43fbdcc99a0f4482152f4
ea80b5d37dccd489729a0985bc2d192981f44906f83e50a1e00769efbedf8d6b
ed9eff323b303564468539e47aadf387765da8bd6eb7ccf02cc595edf5d99804
ee8c16ab17410868ce0d7aa8259efda29c1105ce8adad8b2df63792f88bdaeb7
ef16b46dac928680d0997358218d6bba750704d4693f2c9edabeeff07f17f8c3
f47b9781c7bdd0dfe49696a8668305ab05560d3814de487c586a5081a97d23e4
f5b590e14c0ee9fb4fb697eae224258e04113f79b2bc66609dbc512b51b3a909
f9909e4adf7b1a16124aee23caa687b08aae59321e4ca7b7c00f1afb5784c437
faafe9ff7aeea7325b5c7a26841e194587ff9b0f0b4876e3a206455ebb78f021
fe0b870384db381be2021e30954f2322d72907cd6b02e80cd30673bbf1f1369a

https://calamusonline.com/wp-admin/984/
https://buildingsandpools.com/wp-content/iy6ux613260/
http://koshishmarketing.com/tmp/1wty7v715/
http://www.cleaningbusinessinstitute.com/wp-content/6yjq3/
http://www.ketobes.com/product_ajax/4l4/

Creation Time	2019:11:14 13:23:00		(Attachment Only - Doc based - Enable Edition)
SHA256:
00ce8d5d661522b1f59dcfbffaab0b00b83b9a4b5ec1fcaec26cbd201aa9bc3d
01041fe9984e5db981b480d18247a2af353a8c6e649d6cf7b4a578f11b72cec0
059723c0bca6c1a3b75aecd57a11584a3dc95c8cf9437010428c3d5e922401b0
077069788c5e02a5dce2d44fae208f94f5c9f3ec785d49e414f0cdb501871589
080c0e711fd43e155be3b5bbc2d6ce74fa9cb15432e16a800081f1ec30d5f732
0c655af5bda0c916064578d0445681dd581a2faa9df3b44fe5082a605ab6e176
1972b86ef2e963c7062c90e3760d11781edbbbc40d562ede5bf2285f614d0ee6
1a226aef8fff1cabaaeba9457dc797a6f8977ec340626207697ac0f9949453f7
1c620c89a25d79f5d68fea18e6acdd2eeec475accf9f2fc135ffc4d58b186b11
1fdcdc509058c63a61e95c8c2256b28881ca2180bfd8af7aeff9b0f6aa98a6ac
22a61474f199cba24271978774ae7f6c9371ab96ee282ae0371010baa666bd21
249a3ef32867137f9ef9c19ca8635bfaf80e245124c9fd07fb72f53087f1ff8e
2966dcaf5ac7d3abf47bc1108251bd8e1ae894fbdbb252e4cbe0df12737a599b
2978ff7af1fc07222cdc366f848004f84c9de9aab8523d28e3c82b6aec9d412b
2a7ba2efb6936e6d84a62028568b08fb70bdaff31d0e84d8ea76831a2be9c471
2a8b0424471ae1b9508e856497e170abd91749352af1fec6d0904eb32eea920f
2c03ae795b7c0a79f73a6fd75da1506d4f369f5a0274a8ede93e8e31e81c73a1
2ec35d6f142d9bf54d74892b2fad29e721fc13a598bad9add2a41acdc75ceb89
345dde16dfd2dd7c64fc326e4844872fb3849caba9f04994b75c8f286beb37ab
34ecf3bc1f909536f75e1a054739847c7e4ebdd9f0767239787005c54ee607b5
3e156bdc70983e011f50aecab5b464b11ab8ee2601ccd8ae9c229b7f6848d8ba
40c30d1f376459b08eada5366f4659cb163e989cdbe656bd01d44988239a86b4
4d56d4a61716bb739aaf5c6f7c802f1d7f5e890f25390781ea32642095ec8e77
53a4c3969cf586a056ebad917ef03b79b15da1a7a2e308f3a483aff23e2e41d9
54941472d4a814bd9bb8bbf7e869760d5845c1b2c602a5ea0a3ceebc93e168f8
55f4d08cb4e37ed9bebf4716186e447bbe70bfe82bacc26b5f9f2b95d747644e
58341d68543f196b4282e1f84de8111d2543a2f86c8d2ce0d9d15d18d78a34a5
5a50dfcd0c1048d7c2dda1be5f21d368171fd9ba818f8d7691795c437323225e
5eb220311c83ccad9534fc8c661043321557f679b027cdb24c6183c060bbcb61
66d0832c8d830b7e06d1cd2660c5ba19e4988b9d461b1182578e6371a6ca65c9
6abb54a8caaecc0635c2f7f01da05469bf0a222e76a27f1faa4428e75d6f9d27
6af0c38267d797f2a891ffe0018076dd9ef1578cd819151a4104876a1a6d324a
77bcdd924b8ed047e193b5e888bafb5348624adc553fef9f57311b9834b77e5f
796b39a9eea362fdfd3e1071041fde7089c325516ba260c7d9705ec5b3b4ce9a
7998c86995ee0f20de9e6400ff3c48271af5bad2031bf8cbfacf0ccbba668d75
7a5987a079545667a02680563ff8c01148e8a13f1f3b6b292b73f11ae65b641f
7af79e4669628d4fd0041e2b2a6c262e571d7516cb80068111314dfb377890c5
81bd5c951603257f9af24f66415defbb0c6ac912ea2fd4ea68fc1f023c097edb
81f5c54cc19ed27fe93c4eb14508bf55c6b4e7558803884082ed398a0ba9271d
82ec05c35ec62c068ff02068785cadd4e469248681e7b1186e25b5d0473202ba
857ae6f531e74c89cf0e00d651161d5a6e45c41167e7d5d5966bfa852af5c602
85ac39a11e2258d0ddaf072b4e6160444da9a25f1ba177b5fb4821d224b1a265
861cd31c691de259a130cb1474733e30576f63d7372c73a4db907173e25f52d7
935681f59ab999fb017b9cccbc9b4fdb625379d54c09d44dfbb9ec44ee2c77c7
963a1dc194855d6ea32eb64dcd9e5106a6a0e1feb0fde52bf56fb7b1aa3ffb1d
969427687fce382285d53a5e1f3f0276a463979997b8fcb6879bfe7683934881
98809a746f58c9d283898219ad68beec844d7cbb78845e42a5dfa5a4765363f4
9a03425a4e04c11e5d14e8e6a295fe239a24449bd6c26d3c51035d2c161fbb48
9b8b6149d919afc9d14f0be054a5ba87ddc831aff5aede52622266184288542a
a44c505973226de33a9f13609bb61f59b6678439c73b0b77cf7c5fcbcc5d40a6
a694f2a389a80a4751f63a5241d69b20b8f088fcf54773d38110589e3e6801fe
a7c3e42b6c244a2b2d44cf3dd9b0572cf59ffcd32c40588cafeb6578db967730
a989fad5f488346cf6ac492a1729814bf938303f9993b37d6f023051a20a4edd
b48a59597dee9dd547d3e988acb961f9fc016210d42d575a2f73c07e72f7b759
b62352b027a3b0fc1f6c06309538afe6e1eac19dc087f5cfc74a5aef27f12cce
b7e43ced514f5714517cffe21fe54a60cdb8c873dc63cee0572b533a751f05c9
ba322263a5b9d59b6997020d4e8b0730784504032d86818543847d0981f2b3b0
bac0f725dbe49c0c494bf128fda696c9852556eb1ccc9ed0dd72020ca274178f
c28f9fecc324cf6f31ad7566572b3871426b6e19a3ba40679e0fd571b3c533fd
c99ff71b141af54617f25e89fc2a55e7bed565aaa65dca6f2b855980c22ec34d
cb07d1c9846b738acc48edd12bd05b5738b613b73247092ca3f887fa224a7a77
ccce06ff404ebe9f78b5adf407e8d6aceac77997d3210731605c37eac89db7a2
cea0c626ea46f8122fe4f4fdfb4186dff5d8b4a27268ed92bc17f48b54859ea7
d166423c44a35d912d81460b9e047bceaecfcfbdcd4256e9db269c53b9062520
d4a8427327ff6661024cce8964492afdc13621f0584d10ec0875de81b38ef990
d695c3b41cf94d5e2b38bcb05bc6620ef6e127685028febc6c54a90936e53e51
d71b457d80a0f4dd7ca4d5ef5ba04cf6b0a244888883552b3e643baea598666c
d89c5d5b6f8a1f834bbbc6efc19f57f4a25507870f2f414b4f675e69e378c47e
daaee0f0146cd161e3fa19a8fa846bf0026f6062da6406b58f708466ec4d9c7c
db2f7d23cf57c8f100bb576844bead8bdb2ca209108200d622f80c3e52a08c08
e11bc13f956703b0170c654a0aa31d8558a69fb8add5f1f64b37988cc81e1b8a
e2ee1dfbe57469e696d9096c4737a1a83928bf1339dd74be7ac823133af68596
e3826bc8a6b879b70eb74331a5363de14a5135c7e22516a9f693c53244f20140
efb296c375448e4cb2a340667ecdd88181cf6af18208597adbe872eabee2359e
f00df61c57a3a48f7445cd96f502fffcc70c22203effc5f3bc2f938f3899e7e3
f541484d21e1094029f6f4203db2b5af3a08cbc54e5416ea85a5ad99a1375078
f9e9215f4497393186b212564b6e2266ed39c429c9b02bd48232955859b05b8e
fccf22c73c59a7bd223c9e356aebb3a5ee3e02507619771c34e3f64394af0a9d
fd01c66fe93b5bf2e7acf4ab4801edfebad378d56a66412d0821d784a5eb34ea

http://hopebuildersusa.com/cgi-bin/wpbsk79131/
https://www.chakamobile.com/chakamobile/6t55906/
http://www.yogamatlife.com/gh9hz1m/oaw833/
https://bigdiamondeals.com/summary/o8499/
http://doorsecurityy.com/membership/n9092/

Creation Time	2019:11:14 10:03:00		(Attachment Only - Doc based - Enable Edition)
SHA256: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http://abantesabogados.com/wp-admin/av25r1k0/
https://www.thenyweekly.com/wp-admin/57374/
http://cometadistribuzioneshop.com/wp-admin/i2z620280/
https://practicalpeso.com/wp-includes/j595/
https://shauriegrosir.com/rwa/89ky3v439/

Creation Time	2019:11:14 06:38:00		(Attachment Only - Doc based - Enable Edition)
SHA256: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http://www.uyghurchem.com/wp-admin/saz7f13629/
https://www.bademandirguruji.com/9js2sal/480/
https://theridesharemall.com/old/m09p60847/
https://benchpressadvantage.com/cgi-bin/u3hue792/
https://kellibrookedev.com/test-page/iw751g23/

Creation Time	2019:11:13 22:11:00		(Attachment Only - Doc based - Enable Edition)
SHA256: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https://alfacars-airport.com/wp-admin/jqb2jc194/
http://telltheworld.shop/cgi-bin/07k2z9q72485/
https://elialamberto.com/m4m_tools/v571/
https://pristinequill.com/createuser/mxqd13529/
http://www.typonteq.com/wp-content/w87q6/

Epoch 1 Payload URLs From Unknown Document

none

SHA256s for Epoch 1 Payload EXEs
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Epoch 2 Payloads by Document SHA256 - All Times UTC

Creation Time	2019:11:14 23:18:00		(Attachment Only - Doc based - Enable Edition)
SHA256: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http://www.hineniestetica.com.br/edhlnz/8JUfG9q/
https://copaallianzgilling.com/wp-includes/l/
https://adhesive.bengalgroup.com/bivgg/5o7bg/
https://clearsolutionow.com/wp-content/PB4V0P/
http://merttasarim.com/wp-admin/qvuqz/

Creation Time	2019:11:14 19:48:00		(Attachment Only - Doc based - Enable Edition)
SHA256:
032f3e41fb8bb08fd05aaecd9a6afb82091fb1f9c7a11c8b7183dbff7b896024
0a80acd037d3261d7dc5f131417c24af11879445a7c6772e13c0acc962ca0cb9
0afc0b94a501c6fdc0381684cbd5b02d38f5a7433687ea71f87bb527c09b59c8
0bd7256bc78fec1dea4bf350122eb933175634e18d85ee486249ea86ace159b9
0f5d72c95f2eca5f5640a22511575c18131bb973c555707e4617a7afa850ea81
11215fc96b8cc4c365b82d078da7440102b3917749f1f7e363966dc27de49b0a
22fd067d60b1c7151fb28e9c4f50063a1542e1ce01c0d401673d81f7875674e0
2a0d40226fe7b4d64313823f650f20522d5762a6c7891aa5acf7ab00fb4776ff
2aec9dc88f5c8bc890cbd5c881bff83274e351611bd07455b12107ffa2a7c07b
36931d82a5099c40ff99ab88123ac612b1bb3fc8c333164884d7318661a4028c
3a44f42325011154e34243436f8c3ff2e8cf43caa85cd54240750b75a86adc0c
3e064180cd20037b5f11f5afd32cfdc885fe283aaaf75df9ed52c96674718d91
3f381726cdc8ea36b53caf2e4f11a03bcb9c09ed8bc71e38dfc40826c3777267
42dda420784f6ae1e2903c886c5cf7ca5b1e4652015017c367769eaa80b68391
4cc7b840f4a2d8e83dd2fb4f19a9a892ef27d0d5a39b8db4b015eddcb8cd73e1
576460fac8fcea2090dfe1ca3a0fab6d8cf177b795ea655c605661e54a545b31
62fa0d283602adefc9231df734be61ebd90504e231cf4a2d6cdfb0e46478fcaf
65f2963af290d35496d41c0417271c89458cf2927d065c2aaff8cf51405a91aa
6bfd6c0a004cdfa6e34c6a991f0a67ea37cc91a755cba9b9f793aa665d267ea7
6f217767ad1d0f54feca7665fdcaceec2a81c54c623bbe575b93800a16448b7f
753a1b3acd3ef5415be94a5e32c22faacd728a95a71e6c08a2627b7dfb42e3d5
880ca6ab60aeaadec45b683456a61bd6f9431410ceeb58a36cac064a7964ac1f
8c7f1d5f50a6230abfee1f15d07348b24d081ff61755ec380e5ac03d454b18de
93c2f583e426e47c213060ed52b104a247345f5883f93a3abc3389441e3068b4
9c45c0027222d24d08c7f18b93915f225992acd811cfa70a2dd6b90246cdf048
a48799343345769a06e96d4fa92c7a619a9d08dde520d32e0734c70be7c22434
a8ba3136bb85c11528174e72764430f0723e433e03b8f1f40588c122bea48551
a9ab1cc510b5920502126a3509d6294b367e0a7ffa0cec963eb61ad254c75038
ac78d3e99651083bb0c5ec75a8472ec3e4ef7de7d7703f6ec1c5f87fad2d087b
b099169f5fdfa2d11f183fc68849506fa6a01907b1f4c056c780e0799cddbf65
bd30dda2557fc1af1e9247f32aedfe922b775811acab8e9a4f3d012251ff85dd
beea28c51eea45ab86bb4401cfe586c494c1a8139c97d7763b0748d97d6b8152
ca8cd287cc9d5441f19944826bab11fab56ff759938d915df346304328abfd3f
e2e6a0de7c2ea6b7be354b94486787db1fb8dea99954623e435e9f2d9a231c9f
e6944e8d5f94c8c58380caae28fc89b9bbe6a6dacf6959d6d43af025e06cf8eb
eaec2c2d57c5dd6ad2fc9ff1b1107d81a835a1cdc8130f77e9a3f21e6934ea6c
eb14059e8748838aa8be0ca43d764f16a4d0384306ddbd686cf8eef508be100b
ed0a84f679556464ca25dbed7be83f9ecc30486149e178c47ec198a5cb6c5aaf
ed73df25f51da8a6bee2a3c9fe2d69267a4532d58cfaea4da711f5a3d92e8b08
f2b08e9a6dbda48a8d5a6ab2142dda8509007c97094916d0f78631cf56026ead
f3e8a6d8421af2c64553d8186513295618338bc4c3ecb2da572a894823ae8e1c
f48b659bbfe022da700bdbb1a5e642692a945a2ec481c9572d12522c848ea516

http://seabobcuracao.com/engl/N/
http://mountzionsnellville.com/wp-content/vimeography/zcn/
http://neverlandvietnam.com/wp-includes/ivpeum/
http://broomheadbar.com/sitemap/phr/
https://www.caiwuje.cn/wp-includes/U/

Creation Time	2019:11:14 15:36:00		(Attachment Only - Doc based - Enable Edition)
SHA256:
02d9ab0ae11f99c30802aff557c36906ca25bf48d68e70c912bb8cbb09a600f4
09dccb81198e0570f9c22ad7acc6f2df99e7df16108fda554459bbe2173fde48
222e9d94d123a36a0e75c83adb37a5d251b4fd30c84d405a94a2b913cd651020
22f911a606e2b6a638d94a62fb3a5c7da3a2f00ae4c115e6476f8130bfdcc7f7
27d6ae840f3dad896daf2e8dd8956ae99c4c5a196a99f29b38f6538fd377863d
2c4df9b7e6c5643ea35b58c060d15e7d641e1d2dd86c109462827257eecf28aa
2d39ad510aff0ee9dab6bb2711e374d9c26e4005de46019cb9e5e0809b4d3fbf
3989efc3c9b5fa1fe52810f528079771119eb797b50a05d3ea39a66206366f07
3af202011f96e6052d20112c954539b1ba70cecbd2e45db7c247af01b9b84e5d
3cded35ac733188336456f1e13b705fa81cae34085ddd1414e5a0e1050ff5c0a
4175c6a3cb8cb729325d03211b85ecbd68606786ccbf8c775e1bc127f90ca394
4200c18733c486a48ff863586373fb9d9a05eb3383bc669452a83b7a807ab078
45203f266dd0636ecdf045102a9391a237e4af31d64c803fca61a3ec5cf44f4c
4c0a2dbfc4930a2c48fd22a675b4ca0a66939a61e554e747f434323851ccd220
548cdf3f281494295ddf985f05b34109fe8518ff518a697fbeacf3ad91a725a9
5a8952c10c3ed3eab014ce01b07d92cb4390c4d563274e0e3b46eafe0e4efa1f
656f20478887ea62cdf45ddf15c05f4e24aa9f4fcf9c2f1ac3c47459793c4b1d
6641eedab8a31fdbe0803b5af48986a3cd203d9a70bbee7d96a6dc43034d9df1
67e5fb72f994b7f4cbf513a7ac5ba4d021370246cd5687581b63ef83fd620209
69216e91562c33a8516ba0d835896e93836e1a6dd44fa350cad290c132406875
6dd5ca1ec537c8b22e4cf6d8d3a6572fa37a0d1d1ce897b6c6eaa8e3e31c1436
710b6804b4c5f61cc9e8c72d0c0a10e72d5ba0e8b1530e90a4037c6bffb03fa2
74089745a4cacb95bc691856d1a06e0f672c52ca4bdab15f078d9968112861bb
76c0e37b1b121386721d74d96f88779ddc2918a48d8a04f01a9da119fdd16a2b
7916b9243310b00d94bbd16da5518ae2c8b96fd17a8247aec962153ae56ffbaa
7b84f3e82fcc732ac7d9793c6a2a59ed5cfb30be71a8d3ae5e9e25be1950617c
7eee15a2be83f6e86bb7f328aa5cffcab7e840a4f263827eda588ad630d8c2bf
819dfb13b6006f1e0ed48f138a41f6f8738f064b244ac6ea345463c79392622c
835f780737ace71b0067be8a76531d983c49a8dbdadf5b20988f0d22d47ebe54
8576e92ee7bedb9041d78cb85e6ae1af2f4672d82d99b86381b5d19ea7e42e1a
85aead8f21117fb3d2b15d0eba662992245f495a38a8a30596f6ac83234bea02
8802e6f95c9905905b2e798056cc12c38d477019ef3f91fbd7e78c5210e23ea4
8829e14111c5f97a4adf8ff19d416a3db452471493d49f6a2c6935e0d44feea3
885b04bb345c7b1718f4676bfac38a8dda78a49ad30dc9638352c9c2d2da3112
8d68ac570c82cdb785babcf800f0cbe308a79a4b6cff1cfc547a4c3a709eddde
929e69071af6f57c4581e8e7bd7c30fe06badba3fc72a55e95867108bc1e377f
97fa8a1bd289067d11a7e557036fc4df6607287b94ed133689c6786c5a2d274b
a1f0628c309fa2904f38ec7b52f4cbae416cb7897dd83a316380c63ee02e1539
a3475b8f9c5951a3969374855cfca7edc89a5a4e2bd15e390b8bcbda05662897
a50d954106cdd8b790f136d45a4ccf1952ef498ea5577415d4cdbca39516162c
a8ddb0ea0a7b1ff1c576bc95c7e9c43d1584e0d3c729b7190dd187e43de24957
ab0d8bcdd9052c2ce946e727c6646b13ee05634c1a357a14b19e11e0fb4a8a03
acd11499a73dff33598435c58d1d5fc83ba39fca4a30b4970b4b5f464740500c
b2c305fba6356012f4666497deca1573b966f19f402318f40c7386c99b0a823c
b7e85ad67ed88608c3c748e3629897989e3165bf6324ad35a2b6064ab7b05ac0
b812319a815d64f5c35ccf48e6a0d33d529a2429ccd00c6f87223de7bcea8981
be23cc0721656ff37b8e081d70b371c0b259b36988c7a36ff9c32cc4a33afc9b
d383a22a87212f6609f42626894543387bd0f7a5966706f0888c993d0928532e
d4312dde751d623d32cc20aea36daadd62173690944e278052675604aed37ecb
d5fad5ff54103a370dda3dba140e9c76a384d875141d20caea6772f37e1976ab
e7b2e35914800c4af490e40a75af2dea0c6b484d874b4c58fa9e66b1d5feb1f5
ef32dc58dec82103faaaa5dfc4c78c3160950c5b892dde3618ab302e0b089244
f4eec744573e3a6d6e6710a0cf7350604fee2637ae3f177e9c5f5a6c091ff286
f72b5c8a9298f48eb7a9da7ccf0e9cd5681a7fcfbbdf4f2ad588107f5b8bf927
fcf75adad0ee7ac40c6356f50771a37b18e9d661ec17f275d94a8ab1d90aff55
fe005ab617c1be33db7522dfda1ce96fa6045ac14f7bf4220df8fe250afc33ce

http://anovatrade-corp.org/wp-content/plugins/WP_systems32.1/YwE0KAvZ/
http://caspertour.asc-florida.com/ehzu/62dw/
http://prevelo.com/seoredirect/AGO/
http://www.vtrgpromotions.us/wp-includes/6r/
https://www.andro-400.com/vtv5kuo6/f6jb17/

Creation Time	2019:11:14 13:50:00		(Attachment Only - Doc based - Enable Edition)
SHA256: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http://statisticsinabox.com/wp-content/pDz/
https://www.royaltyofchristkiddes.com/x3arjey/S9AyN34/
https://riemannlaw.com/o7z005hnvr/2aFISx/
https://www.aquafreshvk.com/framework.lift/bowb/
http://chobouillant.ch/5ijmykm/0gj8/

Creation Time	2019:11:14 10:23:00		(Attachment Only - Doc based - Enable Edition)
SHA256:
02eaf63fc74516b3dc235e4227fd79317b852c36b6828b5675db51881e20489d
03d944e662a767a6f333ee3ad8870f4fdf528216adf9e370426ef50d89c0b4db
08bd1050c6231bdd44089dc91415178a26e7f7f8033aca976ac189c233aa7bb9
09f3a57add2dcf9b588d5682f4a8a63a5497c1c35bd44b16341c52094ee191f7
0ddd7cae856873beba5fca468d3f549faa4997bcc94659ceaf4e37eb6b3eb053
14840163a598ca4416e1cee229c76d79c8a4e80d067e9659fdd913b10f06af7e
16174c6542c10ad892962058e78e74b7956aee2b0236191b4f4d9147cc8560ab
1a9c31a5299c2c6550b9877a40eac1fd02e5f6275c260d0912c29d03a708a1b6
1ea16cceea79e12ec1334a0dc8d166062fc2fff31ec6b2840de072c5f33bb4c7
242967aac5d35eadee73d7f157673fcbcf773f4022287984dc57a1d97c792298
27954b74fb5ef0e5c20c083bf07e5878113025e88be3586a7d20f400339e8a94
29fd0d9227ff4a740996f2ad8b99f2c36de7652979da3af88829a17d9b8cff95
2a92584f880ffaaf3c406ab92aa0e6550740be5a420596a858213f427de5547d
2aa4ced4b52dc674ced7bb06acb5c3788ae183e110b11722afeae02337b5de6f
2af1a740da78745f352c45ee79ee1f532faf9857b82c36fdb828eb0959c887f8
319595e78f674648fe4837110d2c555dc6f638e56ec1ccf88e4ef8f6b60b789e
35b54431226d2117eedc295796ced79e265b3d7b6d3e5f0bd912308720c0ffc8
3ef2245f011125049923ac1c07778e3bd72cb91e402f27c44877904e588f89cf
53fda345b79264a1464cdbb9a5019fae89242e55a1ef91e280f8e7ee47fb88b9
57efaa5d95181facb87fba83ddc77779d4cce8490fac270d91b0ba82b54ddaf8
5d0a93632026ab0178e144d5955781dcb68b53f08139a7a7fe6bf692b4ea700d
5d7b003387a1ad22feaf1c296ba72066395eca846743bcc183b3000837588b25
60948f18172da0bf1bfd7064641a8fcb80ad42547acb2383d9dad5234a782577
764faa9193dda392cf6e6467c50844449607b7f5849bcbe44fc5acb8bb16e461
76c9cec38de666a6f58a9c212b1049c5a89b98c218f815b03cfeaedae5d90665
782766c247165d846c81b2c156cf04079440d5e853a51b53fbddd9d015bce752
7be2fbef1bcdbffe81231799329d89a508d212e218c1aa99e7a8116f435b0b78
7bf3f05d5c18747c8fab597414737ac6ac84d5c97e2f1407d4011950287d7abd
81e366b6105440fa9ca1304ea27ea5f00e4c9d5ca8b7f8ce4a5204b195fc1836
8e7bb2c34269bc6153ea753395caa66295cb72de6b49b88e06c7a86624d02638
9e637b7e975d25a5eee29e2da7cea0f7e4e32188b2c797af2756664f6d70c67e
a3662ee2f408c4b9ad694e0a2355cd2299fc2b1a3b4abecb8033ab3b47f3dcd9
a3c37b445f5844a179ec17db36600a95ef9db97e678544ca07aecac1911dd67c
a771f5b04eefa0378389280da2da78b98df935ccf7bb11331bed4d2ce3215a50
a8c56d50c351156f03278bef850b74254fd9f71877c49ceb85355a36a8f93114
b33e17f48fa12e8e77b35f20a26f313a7f433f27e82f0cc66184aa83d5e5f8c5
b4ba916a27ccc3ec0ea82a55182801ce64d8659a3cedb2472a7a58df61d07a99
c36576bc0ebc4acf2b5603af42c0a9c269a3f1515e4a91da7b7853bc5dd16b35
cc0a7c875e3129f1ee7362bdd663e73b087efc477c792c11965bc7801edcc747
d140149a2b196aa0dd455f8bf34802148888a20d2c9e7650319b6f8ffb0a075f
d2ea7fcc07ba489c035c41842fc10aaec8bef77346f73b996571520cd02bb93d
d6e230c786755a00ea6d3886e556349c1f154eb9338b7f908f564dfe4a2486ce
d9f1b6153e2cf9a96c13629d533b60e035ca90eeddb01719b3c21ab58bbd1bcc
dc57f9064df87a9b53a38af3d8abbb95217720cde86d71a1ba34273a7ecec2f7
ddcaddbb5ed78e4dc3071bcb82828b2e9a1adb776fd8756db04a0895bde312b7
e5df6ac376b6b029cbae2c4a6f1d2e12a05fa26559e228a4439041007ad6d367
eae85bce1dcdc8b3fb4b0f7be74b400aedad4ec0177beaf43a9209a4dc412c8d
ec6a325afda3a8370daa6c54c1d153678961dd45b5de9882018eb10534812a8d
edc7b6252b37e9a55e3018c0dccb58f5d7818ccbc3ec9a332614dd9e56ebf5db
f69c9d70099f0088d39e60c5a5dbf0884701bc26d9ef8af98b56996a17e26887

https://www.assurpresse.com/2t2ilul/zOj5ZkyV65/
https://cormetal.eu/zotlh/dm4/
https://kd-gestion.ch/link-to-us/ru5/
https://www.altn.com.cn/package/CQW/
https://alfredobajc.com/wp-admin/5c/

Creation Time	2019:11:14 06:05:00		(Attachment Only - Doc based - Enable Edition)
SHA256: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https://sundeckdestinations.com/wp-admin/aa2bZ9c1ny/
https://gogatesolutions.com/tmp/4i6f/
http://ayfp.org/7pszu7gx2gyo/0bx2/
http://integralc.com/tpmsydq/EI0/
http://firstcoastrestoration.com/sloth_admin/mp/

Creation Time	2019:11:13 23:43:00		(Attachment Only - Doc based - Enable Edition)
SHA256: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https://fillmorecorp.com/wp-admin/m70nxy/
https://mbaventures.biz/cgi-bin/ngi/
https://wearekicks.com/cgi-bin/TqAwNW5fVo/
http://www.oakessitecontractors.com/0js9i/vOa20/
http://ds-stoneroots.com/wp-content/X/

Epoch 2 Payload URLs From Unknown Document

none

SHA256s for Epoch 2 Payload EXEs

01399af4e7d78acab36a964b5280e0a5a08eb4bc1e3c23a648a7ba7e9ba6eb9c
0155c1440f24be22b82941de66947d3dbcb2913ebd8d50703e2bfc7a6b879442
01f07ab5f3db71281e3c580cbe2020f67ffba90071d12b3a21e5e4d234dc35a2
06c4c2def65e097d50753befdd582e1989d8deb00402c6232b1476583fc2edcd
0825f493315ceff51204e7b5aa156fab6c8a701e779cdca291e1dfe5351d33bf
08fbaaeaee79601784ac4f2c1abd28f17dc7dee6567e850f931d4551fe77c5ff
09b6f9c8b64bb651b1d060347d83e4c9bbf3248b57b3361f8e7940226ff45974
0a41ad3ea195d502c768391385373046753cf5a5a990bbb0082e599a35ac9f20
0a4d5a2a3ef4090f351e52f4995e546fbd8ec76c35535f3990b194ea02f43b42
0a65af41b431d54ce0710d98e6e910734d2bf9cffe447692c412f69efe7763a4
0aabe0f64b9dc02836102c00f6eec2178eb2592c12d4643b8411f0da68d98eaa
0aca22bf785cbccad76f7f48b907d9dbbc5cbd4780336c612c119de194356a1a
0bc32ef2e7a477dacc5d08a76290bdcc785e54c3af6e0ecf8cccb0aaf4d249f2
0d247fd48bfc687fcc353929fcd7f8025804467a728fe917fdf1f6f6bf500c62
0ddcd0f60f8cb6580eeb7caabca8307e87d6a32420a07ced39a0aac974eb695b
0f6b363ce019f4b0497570f59d984f9f7a1818c562c80bba3c72c2587bc79e4d
0fd2f0d4e067958cba8c7b58daeb91f8dc780eea7a24e3c5f2a07c05503f808a
10b1b16e391a09e56c0025e51e3e9e41615263c8df0b3c2b95e709348c7a3742
11b4433f669aef6b4b7f8e96b8f4763107a6a817924c8281873b56d1d5ffdbbb
121f544ce3ef1d616944ea036755180139b5a1326c1991b58ede3120738e5a77
142d42a64f9b34fb04e5614738d848ea188de09e200fd8e97aeb1a7313bb8733
144494abc79c7377a944f346e72b1479e20b18e994ea7e48f87156aaba1607e7
17f2a19b37ab6098c723c9c7fb55c5ecf41df2c2671469f56d633aefed628f47
19464e8fe27a88d646881c93b8c009976d93f62ed390033cfc5254dcc7ffd3a7
1988a4ce7cdf7f9348891e0a3899fb602800b28f821c2ce2bd3724385e69eadf
19eaf60db00aef26cb0517b8bfb9fadb85ccf4bcd4faa9d7b5b06d975a37a237
1a8d38facabe27f67cbe08d0cd31ac6d24a038bca3a685ddc337e2b6e9e44cda
1adb4bd40b15096bb571df7d59df7f7f56d7932e0724b008608a1e358274bf4f
1afde4d8e9b6cf1966ec19f870c05b270122124a30f026aefe5662c55c18efb8
1b288de34adf9d110adc8026d886a780fcdd1ea684b6a114d0f415ed8d7ce802
1b73e8b1ba145c20896ceab76355bb396bc36df541c65345646427f77ef1e19f
1b8dc1d2d06e14a726d10281bf6d149f4f54d6cc321b3983d289cd2fa0c4223a
1c2f361ca1d3cde5b25b8b3fb41838ace3418757f9ab65c984ad5c1feefce82b
1c3caff528c000d1c675b6d40985618db59df2b075bfe8dcc26e0c8f71091ad3
1f1e1674737f811bce09e545c129a4aa71fbcde2d74754b327ee8809f0125832
213eed9d6e95560b9f770863a7b9e87e0909591354acdebdec6344d7110e9aeb
21481346a868e366c5cc9b336c53e95cfa603f0f01f27f19e223624abbfea536
21626b8e3ede6b250d231ebab64a93d6908ad51efe6f371c35f0e790b7fd5c8b
218a1882474538b72c16a12f91202e28971fc05b10ab68c9390a420838699215
2328eb618fe5626b2a134ddef68fb69fe3c9746556f2bf702c929e5c6cb35ba6
2497f94270771c1637c6afcb28b0528f6f87b1d97e8e3e065167fe1cca95ecf0
26684e8c6685e01999a3416600823aa06d8eab1befd202fee56570617348f6d9
26b77b8bc97ba2275bde0471cfecf066d304d2e9e79653822643b2281322566e
26ed326f2238a995bea679f4eaa56fcf87995893749456c43b12ce9cbb875327
28832caa9e46a5f3cfbb80d274ab7e62e6c7ae59ce2c2b4cc831ff531004a4d8
292700c0de8798ffcba200b03baa40ae6a505de2056f59227f1c98e8ab225f97
2a6755e6575dfd51335bfa5d657844ce0dfeb07a729839777d780fbfbdb81b57
2ad35c5b0af26e5843d358e01d037249238dd2dff7a4f9434c68eee1de225b48
2ae8145f201a7bfac844558350c86bf48ac4f919b47a6ed80bea58a0b7080f3f
2b6514218180626253400d74edb24825ddfdb5a318d2f20f89a50418bbf504b6
2b84095dbfc3fd870587541d63561af3bf9d582c701cbc5c925adeb5e97440d6
2e0d57611bb8b0a3ecd271f433ffc2695aacdfd6d60550f212243da2a4840c21
2f01bafcb36d68f10d43082c615a28f2de35416198912b396489a483a04f2e60
2f1e5e04548001035aaafe5a6983793f644765c1cacb23966094ff595e86f507
2f506a6c318819c8756e4def62c3e52abb044bac265fa28745bd929465be92ed
2fb811c995eb99912db52722b5771aeeabafff1d2a1ef80555f2307f91a91e3c
2fdf7a05b291935fc407c405ddf571f131d6aebc148954f9e358ccf738cded1f
302783ad06abbaa362c0cf1ec018f9cf13a72711ee9916ab1a8939e96aca49f0
322293bd1155f4d082349db992e46bde25c68cf23a103f68bfa4b1b5cb562077
326903b2d097f8810e06fa6c2c8f5f59c05c11c309e4be9875ce9468e3eef5ad
32728e8ec6b7b1516681a2451635c3a880044f1dc53f6469dc219c9297887ec0
3499ace1693110970e15d49296bf8ee2692c7e020a03429170871d14869fd809
35d670f83170673348fd1aaa95d0bb6646c8a66baa9ed1a6f09cb325f59a58db
36dba57726c2a14fda280fb9e7cc1177f0a4b89f31593287515bbd5eaed02e42
37644ab41125402367631bcaa2930063bbb6139ef27f5f8de12c9b8f12d4bbb6
390361b1c3fc1ed6c78a9ceab16f5cdb3b90e73f27e9a4b6650e0e0ccfe20322
3909de147dd2d24e6b565459d6f48b7ffe11e0171f8978a09ed75547f76169e9
39d4216cdf0c5bb0b9b3ff43c5b4460c99d7828eed8504d4fe4a40b68ca5d1b2
3c5aa069b59f39710101c0907379355519ea7b2ad9911e986552426d91b37cad
3cddd5056ac54d28689c81ddd4277c268c459c146ee7d146033545c2c63b5e40
3ebd7dc9229509af041cf1bf22c6b8b42522b37c640c9958da405e0f9f01c0c0
3ec3348de2a8c765453670e6b37ea44fb59a1bc7cdb1aaa4b24f700899eac751
3effd749ffdbd03693a7fc26c56b3e7942e00fbfe9796d2bd08f02e9852464c6
4014d4b62874e1d32af25b15b610de7be7443103c54454cc22000da57d05adeb
41abb3a2e80cc25446100887118ca6f467710f7ff29253b4c9b32833b4283719
41ca6eb7272ea6d3b41cf84c4bb3b03e8c7bc9f418adb8fa6e4d1449647c8b94
4281dff0a6fc7839358f807a066c4117fb1c332818fa941d3183d6c1fc0d836a
44842c367f4c3c0cd75182a9ee6689cf38c29aac115ac68301b888e944910730
44ce34f080b6600374be8b5a3fcbc0c758f9d9ecb354b80eb2ebcf3fc72103e0
464e823b0bbfe0c48fde9944d0c7dd20d680caafaa94730aa9623d01d8266003
480553dba92c5fd293ff391755c47917e3b2642c1ea0dec6a9f0fbedabefde6d
48e518b415f8effb277e2c8f349fb326ba749e7868c0a3d0796f2dae6a7fe01b
49ce477ffcf2748aa3efc81590f36e1f6cad348d7bbc019490215e12c179ca8e
4a2ecfc4fc6d2182b571648b0d3ba330d7e161030348fcfa2d2ebf74f5f6fce3
4a78aa26add16bd1b1c2a6ecf8d64755ffdf47f9223c54b286b7ef71f454ec63
4af90a84107879cbe5850a209dc600b18b83e616b0f7aed1a22d1d684f60aea9
4b08f419bf3059e8fddde8a89c1dad884367a4c356c53d42cd43e1db641820f8
4c17a221e139d2c9fe24f21b3ab51ba1324ec6d498851d619caba88d526f9313
4c3f49dcd0c618dbe58583f7a04c444776e1e03273982ec1e1b109f29b1e9f23
4cebf9a2921a05dedf2cb9e913bb061c6f5057ead11f734bda1185e9bf8ba660
4cec0f194772ea52a07a8289c651fe5871a0ea47ae87d0b42d90c84d8986a77d
4cf4767177103b4f2094b6bc3681f11221355b482bade33e5a8bb30cf65dba05
4d0149a81a13c9e110d47d322d9302e4a3bcb35bf3b327ddfb57600e33974f7e
4dbc1e56bc3bdbd792a48d0c7db17134d4b4b569a0b42385bbbca80fef490f01
5010bb3540350a8ffb50efb66f846dc8cbddb8246b83cdd6aeb8ad9de332982a
506ebdafa5d4a9281fe9cb52cc23923104d1a15c9884a7b7f3122fc4e701684d
509e58545c3e8f989cbef68d7296ec05cc234c38411dad9d9a465f9ed04b79fa
520d8c295c9f2483aaca8ff1d11f43256843bde7eba97a867d1a5e948d6b9434
52b49abd366dca3513685dc28e31a31f3ae5f0a121de72d6ebfe4e0b758ea31f
53077404ca2f8ae223c22e3100d5f5ba2eba3947d3ae0ff0f5a603f32c45de58
53c433d37a3cb32b8a4854f60b1f92b3bb3ac80b12add73101646343a205fe36
5587446662aad79be264e07dccf52e5c975efa0a1b3b0325ac2952bce70bb32d
55c3861c9c4c5121044cc163e49c4d12bcee5a4552c055f41834d27d82a78769
55c556e482645b5313951ac0982991fbbe1bc744ca1c75cbc71fa7eaeb176125
55e810574da5004de7a9f0fe7dcfa24e34fece7a0b6b41c3a57389a1ff83c3f2
5606890cd25063fdff2af4531110755cf531ecf79ca3260c168c0bc22349e3a6
563b713b0e9e5beca4c91015c34896a9599627c1eae0efe55c6be32afbe4b08f
5670a14e87e0360cf3e31d82287bfab16ad0f434a71eec270ce8e06a0a0e3157
577182be386eaf3660fbfd958e3320b7bb467b70fd8e602088e54b46d384a02c
57db30fadbac0cecc70189a4d2fdcfd51ced53f71397c4dfeb72932e62166995
581252b934ffd361d2ac81051f06caf4eedd9494a90c2a26383e9ef3017d2065
58128152c0649793a352a6b1fca821e24cd86f3b8723611d54fe433e27b5632f
58d7909a96c860675ecadc2ff8e04b49002c2cd51cd9b983c67e5b66a61cd60d
5ad917735b94b90c075622822b6f3a618de18536d73e36791e5dc7012a0baae6
5b2881744bc53a807f0eb11a1aec527e0a8a9a288605d6850a4f83499dcd7ab8
5c5fc7e66a637cb8bf73ccddc9567747d0c2472ee0a315064f7d920f31bcd156
5cf949e96eae8c1600eae910bfeacabdbc2e4f49fdb7efc9c197ca56618e40fa
5de1b7c5110b95951a31bb6b47baa6723c8334202c146b993362d14143d25c27
5e23300806b720504081bddfb9aeaca65588af5a749ad12db0c7b3dcd5ddd041
5e25ba0880bdf4308e6733366686b626badaf9c387e480cff6ab2f1233b09f27
5faa8bed00b31004c742537800e5e3689057c1422088e4471394dc5aaaa47147
5fc7b1d0947fd713a3241c542c1130315969532a1701c4102d26c9fac3450b49
6076566bcea2c64d780b27ae42bf82f06b7c1506272b33d82741a3192720576a
6225f659252543efd001972a77e17876f4edefc44fde8e53d2c8a0eb62d95838
62d8a318684f9f96dc4cd57e89630f9cd18be066ae56c179b1e77bed26dd2797
62f6ee486fdfbc98dcd4d82059a6ef7a1cef6c75b1bda491a0d999c0584044b1
643b69898b1f1f2ca3c1d4f85e20e2aafae03ee08f56fd41a851a2132b40ddc7
6595c8968a008780e34318bbc43b34038155fe3fc749f55631b0e7879f4a56dc
65c62ad0d27fb1e699e688b41b0d2bf4a8683af383f81f1a54cc7358109c75cf
65cef56ad9170239457ec7debeb5302f7aff095155fffbb98b97070cf02392be
661e39421477970ff269743bf19da8da79c0b191cf7e307d8461594d14a9cd74
66eae3b5f379506025f15b5eb09555bfaec50b7ef982c75fa315d6f73a68fb94
66f6aba177f8f09f0617b1c2f9e3341bbe27fb42268e3982818addfd41806444
67e4b239c4aa83aa80ef9d1db100bd83c27411e291c26131e2b2a21d56d9e1d1
67ed72f71d231d4fb3df7e2e71bc42003c753c1c8ab6391dfaec26fd055b0684
68214571b3f6932273db66487b1cecca6e878b2e04c14876d62c3133d7a7ea59
684a8c2e923f035421d67ffe792d39810f384add3c237dfd5fcb4a06b826f91f
68be795e3bd9a921f35fbb74588125a419a0c30337105eb88abd64dc4b5cbc87
697aa9a3b32a840dbd538413ff046dcba4d01911d6056464aa6527e2ac1a10ec
6a604092ff1e7fbdc723e63a0ed1a78907a24f0d27c419ca5ffb6e8532be9014
6df12c6f6cddc0102a850cb396b739f47cfb80714b4ca777d3010cf9be9a36f4
6e19f4b3851594a97ddf2a5cb947dacc861673a212a56e96757c7e887c9a393b
6ea2308b1ddb4ce22d829045c9980dc99e125337c8d49953852fbd14f8edded7
6f0357b754f6a6a341d938eecb10b75ba24e53ff832d2a321c47d77c0a902213
6f3c30d5ec7ea174e171a5fe821f8adb84d3cb6609e5b85ebc4760ae553bf411
6f487cff835e373aacbdde3ea5244f5404a2a4245924eca2b3e7a0c600ea6af0
7044b9e097f505798bdab1df1416144ca151632f046f0740c019d8f2a0bc0db1
723a00c0d02ca30e92c76ca423959995d3ead43a04c46ec0260fcedaf681b309
72e09f5d47a6bd4d9971e86e5e7315af75e01b2ad3cf2a991df7eb04c53aaa44
7316cb5927df4d6150c03199dbb5ed76bd39ccc45c233526ee355a7d9183a717
735504150e1f99377d4f5bcb151fb53b7680d04e6c080a79f1c4c35ffddb0004
7380661bc51501b0beb978cbb6d0eaeebb4f9fa50c4ea82160f7674edf822932
7460e0d44ba9cce44909ade375e9dd9f5337b1cc528dfcd4cfdfab6e2cd615e0
772ad7befbb3e3979745f0c91fa947ba7139bc6977c6984ea47041d17d625be4
777be9b04a82f0cf19253a72ebfba72fe1ce65a61dc398dc621fe47217b420af
7abdfeb13da41e2327f943a633c3064c4d0698931dca0e0c43aa2c7c8732cda8
7b4f7a6ea423d042ad2838f790bc0abaf83c5112cf7023750782e37826408df1
7beb2b91e90f73413c7f165f62e09c5c52ebced5e1ea729c73c216989b3df2bc
7bf47fa94f7fc7e2552919ec83d6040ecbbf3dbbadee2317ddccca3738397b7a
7bfd75f008de0e3cb3a6e145731e8af423abb8739ba47d109c56d5f657fcefef
7dcb98bf28fa47419ab8b32dd90eb537fa062995b90f3a14f54531ec0ce4d615
7fc2b34b80efe104ea5ad5a0a72dafaac356c3653cfb29650bb7a3b1871b6beb
820e859e7b9583e81a3b449c65f5748b854ccfdfad01497e87ae02fa95864a56
82ec0a937059bb9ffcac006ed0807baceb8b47ff1e215b5cd7065907094dc1c0
85b819b85c7585ed444cc0f468a0731bfa77f7299772cdbbec6a6d027b661469
860d754cb2607dd00aaee1ddab89f378517f6a3d4f9d571fa12e0e31b71bf9d2
8659a07fe4e65d462adf383500c1a4391e05a7db24ce61c89a6220cc30356e52
87d3c32cbdc3fa0de5811050bdf9d61d0a7cf4cf5d27b33a20f24cbbef05a87a
87d7459363979684ad33d2d4095fcd0fc134497c74ccaf5f08df139277c0d5d4
881a63d258addb0132ef8c0aecfd13184097a1cc725f3ae3f176238178341fa6
8985b08d782375a21e74357662444a3b95d0528b6b5f59ac469cddfd74527b18
89e6e1dece935117d1435be389017f2e87e786c745907238c6aa9c76ecd0573c
8afd71fb61d36da2fdb53238fc983aa4a5142e16986dcb620e0043cafd303fee
8df09584ac370d934b39dc538c3eb588d188ff69cda2192e5b12eda2b1b06d40
8ed48db984465766406ea7921edeb9dce160c579149b72218a52867e651fbeec
8ef2268c2c80b4c353b279f9b056da7054d7db5cdba016d313fae5a3e51010b9
8f9a7ee54bf740c9b2263155af982b12e6e150dc65f33ccbcc4f7b82252cf8c1
901e81f767a090f17b183861235fe95c4955eb577a4e6ba75d12b3afe3b73a31
9076266255d050258dcb9b74fbb8769c5e514cb33fd83a67301740e56e33eb26
90d60a19dc36f6781b8394d1cbf18b4ea912a3f6df1a90237ac0700d19b92a7d
924548e16eee5d6bd4f876e7893df87487d7de85bf6d8fccc52024380593e790
934cecf8e3c6cb783c0618b9ebe980fda93d630eec67386362f689efc6ca8d4c
947f4f6789fc5f6076f6fb7311606ed7da2a01da62cc7692af2baa0b42df0c75
94914f75205cc2e1f0eb001f06ec1a32ccd44576852900d0f5dff79fd0928912
94a68883bc2a4b4ed3573fca6589e8fa625fd40b633b164833faaa469b92a258
94accb0416c9ffe1f6763d1fbdeec48969f4d9fa0469b5c099d2d8faf8fae70b
953782991685414c5107cbe86f2ec68040347549aee5d857006d001de4474c06
965002b8be3371112380f1108dd19e4fd6cc6a394b4ae43be9bccf5ab46d85b8
96c5483ee5084ae225197f2adc5763773be9d6835b8476bc438665e95694ff17
97062539cc2f5565396bea3dd002ac521c8704fbf940c2abd714957d0dafc8a3
971d6e5a5f2e55f8476c2d2add0fad41a04107b3c893cd35240eba370d758dcb
998f6627c9c9873719aef6a877ea43217fb30e3979c1b84585cc863a69783d00
9a0fc712b8c662b62c95d139e5c71590c6962406d64ab1a8b511dac4850dd66e
9a3a496f89c4026a71f931d2d45d88c7e9a00ff839d3d4fb0c6c67145e8f9aaf
9bebce8efbd11a4ffb8b46af2e9826276838dde4838e84c2064c756925480bcf
9ca71089aa385ed832f39b0fb4797df5a1c1d52afe3de8c0a7f246adc8d5bff2
a1efde938cb577abf4e0fe7eefe75aff92dfe162394878de57d809453618e1ed
a438e75dcf900c2383c4eb3aafe0c943c68f010b18561cd54af2c3b6af93f61e
a4a0183dc8aa8136ba1dd6879f8bec1ddd5545138a8eebd885c471a8eb365b32
a4feb1067dabdf322409d3e77c05ed70824e85794ef4cd510b555adffd33b100
a515c5154a3b024713dea09733b37d79f6bcc788059c54dd21be01ae1080606e
a5562c73b8d712d653d40d3e00add9d284790cbca3c84039c3764f344fa806d8
a5b142c4c2697dd11d3522b221db803b2e6efd86262dbde4d7a68c1e02eebf30
a689c6bc1ab4b5152883cecf0479b621ea14b7f9e53fc4e6b6178069d9936437
a6e1305ef59709b9d51b9c0b0719fa724401b3d8a8f5447546771de95bb2ca75
a6e28906ee667ce3bd4bae769993ffb1dc4d42eb9f1bdb7461eef460e4b7a5e5
a7c7eb558cb7a4ea7c9a06614b71816cfdd384131e556dfcccf6c6bbef927252
a896efb0204d92a68bd20a5fa3383ff2bb50af1a58d2a048d1b8280163adb378
a9011d6f87f1478d34b1c767536f84b57ae212ad512abe11215b024874f02a06
ab2e68216ec18224eedc54e74a9f730c7b6dea534e255eac4a8f19a889650a24
aca49039993fcde9ed2b77c2148c1d240d43a603694758878b58adbc2c9d4ccc
ad6a422fb362ad19a46cb750a41cf5a7d0faaa388fe6885c99ca8778db0d4d29
ae7904f0d7f2b59e46c0351c71a6496f2199f5e9786b0c396ad6955cbfce412e
af5c7c1c62bc06ac19e887d213c937d66ea3738b049fbe5d30211754700171f7
afcac0445d54320593a28cbffd8d6d5099ca6dc0676b9f2595666f4bb223b368
b0ed24961025e441b737d96e261d30da4fb66cc97e047de9e581c8db276ed5a7
b242ceef17501f84f2c83741da3d04c10abcbe2468af85f2bbbe516d02a28940
b40e0798d66b7f0445b897a2716e5003f019f752a3675948d16dff3e9aab26be
b4a8c257468aa1adabfe827f7c638528df4f980b99bdc084b4b46e4475d8f497
b4dd4613bff618c1d40dd9baf2ac4e84bcfa0862e622560cea88897f45a2d3b8
b6b2da6c074f4bd3eb28d114b576a358f9ff1c19dda086048014710cdfa33ae0
b7b17a75d5df3e62c2d5b64a34e11c0cbb91209948fcec40dd4250c201fed2c0
b7ffaf1b741be377660ea6545f75c30dce6f583c37ebde3585b8bda6a93ad03e
b83b16e876b1e63ef8297cae736670c0a4044baf34a30ca414581c3663da4d70
b8ca2cacc7a8e5667d54f816d05de25bd364d5f4f078503f394d31f2f982d762
b9641039b5dc90113f666ce126739227567ded1e8513cdf474d105bb424f590b
b98d7457291864554e9c35bd32d6ee6cd2dfeae6322524be06b0e4f5c6b96cf1
b9d71d38be7fde06d0b96c2f403c9c4682297dea7389e6a2a36777c107b114ea
ba69d2fac2a02d7205238fbf3639e13d5829412e41572b264f9958aa0ef2d339
bb3d5d46f3a85ccb12a9b79f22196a089063489f3c35d2daa139182bd13a2a50
bba706432059e052c4b9f18525152ba57522a9a85ec7981d48b2c248f28ba645
bbee2a519e87b64046c91ade23ddb319a7c06b93ccb4990979f800b58b01f241
bcbe72bc902ed51aab41e424e08d7672fa51f57db540cb4dcf3f925ccec5af04
bde607c6d20065866c3941997810c0e41cc57786789d15a82794912a66b35d56
bf211bb1fa09363f24397dc832f91c99c0d5b609c804962c028d843abb2909a4
c0fe4a15afe97278e9e975298c9761980a136bb04994edb7ca0f152375d04f00
c145d72b7834a26d841bdd435acd8435c7bc02e07baf4d1f99301da83f5138f0
c1cb1b5bc6a28f8f52141ff5a1fbb1395e64146439c0671bd4072b7e301d3dcd
c3f3a2b4cf6672de721fe870865bf429381fc3e6e83620c41c10378f75d060d6
c8cd32e5d174b54a26a77b40e7d5b852f3d0a88a618da1f23112cec11e321b4b
c922c8eb289be6367f915646179b01a71dc376c7cee345888e58ad202a1af8ed
c96e5bab336be0efb158ab72a028b87794e275504f4d210924e03460d4cdf9ef
c9e494f4860786aac25804f2fda1fa75be02259b1be6b172f0edfb4eed41be58
cd32879b5db0d6fdf98f29b97d876415e8c56e438cdbbc834107c97822a3c2f7
cdec597b2f19651cfc7cd7d5c43a26925834d0645fedd7c56e14319be317c129
ce33775841e3c159a1b5c8b54f6251a378b9bfb3e9c1ee75f6969d18cd8e683c
ce9c08e6dcf4066e70b173eb6ec1d15672d25a07fee4a10696a74da14b53bcdc
cf7083e51f7bb1f0457f87054e5d79b5f79bda7ef2a058600828b7c0f8a9b5e4
cf91e66ec5c2fce287625b56228e9f14d14273fd82a5dd38255d105bbcd61887
d030b22028562ca3ee5626f49b69fe67fe4179b58a9f1d7ca60ce73313aee458
d0ba244e6767ee2582d5b484af566d3f536fde890bae1f56c44d3a54b24a169f
d1143e52947663587e3f406de1777ecdfe5f3c40e2b9927b1202b539f0c4e19b
d225101ee29024c22af305f0d272d71697a082166c9845db3571c0e63fd04365
d281d6f7ed13ee719508ce080b440c815c7beef5a911220ac98f1b06b57319f4
d2a6349021effac68913446add166d1f3794f1aebb060f0093284d77452c845d
d37e48c25f9a0480e5e52d6a6c2596d6a5914016e85d33151475b994f78833f3
d3aeec55d3d3f5963efb66fa11f146f27fae94dc3d88e1f3398d065813a05471
d657580e85eba45a5127bd5d7006b8c02a0e35fd3c386591efd569a7a5136ec4
d6fbf97b3f1a75f9195ef381794b4ba79178e34a1e72a5831105bb147334ca9e
d75dacbefd15ffcafed397c7d903c69e6d4dc1886241326d610816e2fd23ea15
d770a3892f73370ce0a89c11b8185bd4e7298325b3840bac66f4b0fbf74f185c
d908f53e0697a4699cd12037850ab8cd1ebd6d72d36821d7a29ff2961112d09c
d91e811eb02483d84d3c3988620733144b623cec3015ba7e583c1c829a12ce64
d9b887d765b0a4cce3e976449d54c9585d90476fde62a920963a09770189d90f
dab7e2d2de9aab693b82ee7609cb56023923fa58aa0b1da344083b4af03b679d
dae4cc6bd776af3c9d21f7c7457b98e9ac9f71f17d82a829914c3ba2c1ae56ed
db5f47c5da7976fedbbe4cd74714be7b57a5336f0e2d32b5b2f42aaacd4ac815
db94ec1d824179c39761756a3d82526869bec2859cdc7f9e2ca9be6b85516c3d
db9a409afa33b2db09c926e39b7bb3631509113e6d1a718c1047613842bc1b30
dc5e4bcb3be44d6b51552ea8332047a3400f35a9a55d0c088f202634fbf95cdf
dc85fb4e937e5fd4d380d343413ecd86fb02d1c614f1908d7a495522d758f7bc
dcd9939837cc6dc8c12cba8306634102a60b768144032d7e6ea9535a1bee66ba
dd4ec43f5cab2efd6a932b1d150b8651e85a8deafe327627b4a2f6669638b674
dd9ee80e3d7440af79b39566098c7daf561d8f11d246422b680d21d9925f283a
df0900eff44c2d8c4dd68648a88f818111a9f0592f123dcbc0a4dd1f15d53051
e086236d95c2559dd8f50049e8dbae897fa63c2e3ed18c90b46eda48bdfdc43a
e1e36b609ea094e304435ec4f82ef63c504e313aef9fbc26609b13e11d6fde98
e38bb22f2b486f38a3fae4f21aa98c02265b4fcc7acda8cf6ce7674ff624d0d7
e5c443b9bade5138f9de15c3bf876c2c4e578f594197d44489d2490a4f1f4e13
e5ddca24f8a3df95d25d933d926dfce4df50097d597ea5eb30a5d036dfda92c3
e722c41681b3d0c81a972fc80df944787ef149acce867a2992bfacbfeb075936
e7764222af6bf99722e6363d789724c2dab277ae83b562fde63122fc8abae694
e77b79415e5c443694ee8f11261077a085b3b0a87e14a47e56ebeb0dd3fd1f02
e7bb05674a8f0020d7895c0beea7275b9fbaa0be23c85854d0a2cb4c602f8fbb
e85f74eaea2fb337b825e419662fa212ee805bfe7eea3377c2d2ce0250a68744
e886cba6a1c69baa74f3654cc97a0a99246ac2ee2150fbc2ddb5ea7fdffcfa7c
ea1c2303215feaa3ad6d3e41b8c3da9f0afb613b88e7bdac228d56a0b4bdf0fe
eae333678e2722f389697af908affa746b35dbf1b5afe332ca99636f34531431
ed45d63655484fcf2fda7045cb531d87dccfe638746ff046758d817265a2badd
ee5a9607c82a53910d3e886c0571cc86a1ed82d50014ec1a9b6f2b5f76d311c4
ef177dc68da701a37bd3181442372e953342b7f6865deb3f06e3fd940b391d3c
ef45a00393f71c8dff7ebcd70182b0cec71bb557a9470d3a5de2205dcf0b838f
f0b6fcfd49fa7d737710c49731227626cbed60c5648ddb7022fa8dc490674b59
f0fb76abbe563ef6168f6baefdcae1685c910ba7822ba352b66ee9403e1ba7da
f35ed3d5d1da8c978283667e2463f3e170120206e200879987fccdbce292a65a
f4e3bbdf163d0bcc9e8c46024ce744ac089c80f63a8156c8de98b50fb065e94e
f8e36c6a6869dcac80e08374a3117a8dc2c09047c1efdb5bd63e73331b2dadd0
f94982e50e4305ea37d42b0893a57cc5fba8f0b0ef2115fd61b34eba73cae750
f9b444d7eee648d7a22eb616499b0e7d10edfabe669d4c45c6ed51476588151f
f9c0bd327cf00e413e5da5e1fa69b5135d61ab660604eff59385c2932dcc53ea
fba82eb6b08305aba7bb3167da03c1c58730f5f52f2a3a6f57f473d092cae0a6
fdaac51a0ec53f30121a182e5782ae0e9eecf0050b1d6876e0f57a56b55e54cc
ffe63ed902ba26d2c71680336d3ad0347de04982a3e9ad53342a450d750b1e49

Epoch 3 Payloads by Document SHA256 - All Times UTC

Creation Time	2019:11:14 19:53:00		(Attachment Only - Doc based - Activation Wizard)
SHA256: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https://jjcardsandgifts.com/0fgx/bsl8e5dxuc-lpcwo9beha-1390894031/
https://andrewharmon.x10host.com/wp-content/PKIoLvaj/
https://www.egolandseduccion.com/wp-includes/NLHVvLp/
http://bonekabonekaku.com/class.service/nDOiDxnvf/
http://studiofotogenik.com/cgi-bin/YBbSAlp/

Creation Time	2019:11:14 13:27:00		(Attachment Only - Doc based - Activation Wizard)
SHA256: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https://sneakerstyle.top/yotei/5qse9kbx83-3tb4s-91455/
http://sternen-kind.de/wp-includes/024krtfz-ngvdek5cbx-32251/
https://albatross2018.com/2cbza7bxhv47/CAUOAXA/
https://australianjobs.xyz/wp-content/judn-azni-5975749061/
https://vitakredite.ch/g8dqwg/qxFUiov/

Creation Time	2019:11:14 06:03:00		(Attachment Only - Doc based - Activation Wizard)
SHA256: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http://jasaundanganonline.com/create_sitemap/xhzlg-yhct7-22183398/
https://blogbattalionelite.com/wp-admin/npbvs8q-hw9h7u1k-5188/
https://agenta.airosgroup.com/app/xmt6ku5-plq8-53219773/
https://digitsols.com/margaritadsg.com/OJSqDOw/
https://smartoria.it/nk8b72hr2/JGFMIieDk/

Creation Time	2019:11:13 22:20:00		(Attachment Only - Doc based - Activation Wizard)
SHA256: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https://food.com.au/wp-includes/c3wzj22p8-7yf9jes-7673396282/
https://toxic-lemon.com/m2iqaxgm9eb/CtJngc/
https://rezilyent1.com/e2imncs0y/zpIjEOquv/
https://simplicefogue.com/rknfr/ynotf1w-8t79-59831828/
https://www.design-store.it/xunw24/5namu-e4ihyveh7-83/

Epoch 3 Payload URLs From Unknown Document

none

SHA256s for Epoch 3 Payload EXEs
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C2’s Per Epoch

Epoch 1 C2s

87.106.77.40:7080
217.199.160.224:8080
178.79.163.131:8080
119.59.124.163:8080
190.4.50.26:80
200.123.101.90:80
51.15.8.192:8080
94.183.71.206:7080
200.113.106.18:80
190.97.30.167:990
86.42.166.147:80
154.120.227.206:8080
39.49.18.162:50000
201.213.32.59:80
46.41.151.103:8080
107.170.27.84:443
190.210.184.138:995
138.68.106.4:7080
185.86.148.222:8080
181.135.153.203:443
170.130.31.177:8080
134.209.214.126:8080
190.38.14.52:80
189.226.151.198:7080
187.230.99.192:443
204.225.249.100:8080
111.119.233.65:80
144.139.158.155:80
181.16.17.210:443
91.205.215.57:7080
203.25.159.3:8080
62.75.143.100:7080
125.99.61.162:7080
163.172.40.218:7080
45.79.95.107:443
178.249.187.151:8080
77.55.211.77:8080
201.163.74.202:443
142.93.114.137:8080
76.69.29.42:80
91.83.93.124:7080
183.82.97.25:80
41.75.135.93:7080
149.62.173.247:8080
220.241.38.226:50000
88.250.223.190:8080
181.198.203.45:443
62.75.160.178:8080
187.188.166.192:80
51.255.165.160:8080
81.169.140.14:443
79.143.182.254:8080
109.169.86.13:8080
212.71.237.140:8080
68.183.190.199:8080
104.131.58.132:8080
82.196.15.205:8080
91.204.163.19:8090
94.67.21.187:8080
200.58.83.179:80
190.146.131.105:8080
46.28.111.142:7080
189.141.224.163:443
77.245.101.134:8080
186.1.41.111:443
5.196.35.138:7080
14.160.93.230:80
96.20.84.254:7080
186.23.132.93:990
139.5.237.27:443
189.173.113.67:443
207.154.204.40:8080
159.203.204.126:8080
46.29.183.211:8080
80.85.87.122:8080
46.101.212.195:8080
69.163.33.84:8080
50.28.51.143:8080
201.190.133.235:8080
85.234.143.94:8080
173.212.220.251:443
60.54.37.25:80
89.188.124.145:443
181.231.62.54:80
68.183.170.114:8080
186.15.83.52:8080

Epoch 1 - Spam C2s

37.187.5.82:8080
45.55.82.2:8080

Epoch 1 - Stealer C2s

51.254.218.210:8080
60.250.141.134:80
190.115.18.139:8080
75.127.72.18:8080

Current Epoch 1 RSA Public Key

MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAOmlscqbEIhLjVsj9r3eYacKi6C+Qrua
j5TlU+pn3zc0k06qCoahFXBBGnYMotHQc6OwfBKwHWm831LIVg29kEjT8UYxnN5v
fzNGgqXTe25QARf78CsQqqN/ImKdXo+GFwIDAQAB

Epoch 2 C2s

183.102.238.69:465
192.81.213.192:8080
181.143.194.138:443
87.230.19.21:8080
217.160.182.191:8080
186.4.172.5:443
169.239.182.217:8080
176.31.200.130:8080
173.212.203.26:8080
59.103.164.174:80
190.145.67.134:8090
104.131.11.150:8080
86.98.64.189:443
91.205.215.66:8080
181.57.193.14:80
80.11.163.139:21
92.222.216.44:8080
182.176.132.213:8090
87.106.136.232:8080
104.131.44.150:8080
191.92.209.110:7080
138.201.140.110:8080
159.65.25.128:8080
178.79.161.166:443
192.241.220.155:8080
173.249.47.77:8080
186.4.172.5:8080
192.241.255.77:8080
144.76.56.36:8080
200.71.148.138:8080
115.78.95.230:443
94.205.247.10:80
86.22.221.170:80
190.53.135.159:21
189.209.217.49:80
85.104.59.244:20
190.211.207.11:443
45.33.49.124:443
190.226.44.20:21
165.227.156.155:443
31.172.240.91:8080
31.12.67.62:7080
5.196.74.210:8080
78.47.106.72:8080
212.129.24.79:8080
149.202.153.252:8080
67.225.179.64:8080
78.24.219.147:8080
167.99.105.223:7080
144.139.247.220:80
104.239.175.211:8080
103.39.131.88:80
62.75.187.192:8080
104.236.246.93:8080
46.105.131.87:80
152.89.236.214:8080
186.4.172.5:20
37.157.194.134:443
178.210.51.222:8080
167.71.10.37:8080
37.187.2.199:443
83.136.245.190:8080
186.75.241.230:80
211.63.71.72:8080
87.106.139.101:8080
95.128.43.213:8080
181.31.213.158:8080

Epoch 2 - Spam C2s

87.106.253.248:8080
91.121.27.119:8080
69.64.67.20:8080

Epoch 2 - Stealer C2s

139.162.183.41:443
74.207.234.18:8080
94.76.247.61:8080

Current Epoch 2 RSA Public Key

MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAKl4M80uy0jcxUiFIaJJyxgHVVnFtCq6
bi6f2xXPh/XUZNyN8UXDe5HzhTc4kwon9MBZffNwFOIc61QfV3K3YzEI/ktcyNqK
LS67ONxsVep769QdiVQJXrIaFjMXKz6viwIDAQAB

Epoch 3 C2s

142.93.87.198:8080
201.196.15.79:990
187.177.155.123:990
91.205.173.54:8080
105.226.188.128:8090
178.249.187.150:7080
124.150.175.133:80
91.109.5.28:8080
119.159.150.176:443
190.217.1.149:80
162.144.46.90:8080
157.7.164.178:8081
95.216.212.157:8080
124.150.175.129:8080
195.201.56.68:7080
177.226.25.78:80
104.238.80.237:8080
46.105.131.68:8080
198.57.217.170:8080
216.75.37.196:8080
172.104.70.207:8080
78.46.87.133:8080
191.100.24.201:50000
83.169.33.157:8080
152.169.32.143:8080
181.36.42.205:443
154.120.227.206:8080
103.205.177.229:80
46.17.6.116:8080
72.47.202.235:8080
113.52.135.33:7080
176.58.93.123:80
211.229.116.130:80
189.154.130.167:443
51.38.134.203:8080
95.216.207.86:7080
216.70.88.55:8080
5.189.148.98:8080
190.128.222.14:80
23.253.207.142:8080
181.198.203.45:443
163.172.97.112:8080
193.34.144.138:8080
192.241.220.183:8080
172.245.13.50:8080
138.197.140.163:8080
212.112.113.235:80
189.218.243.150:443
200.55.168.82:20
50.116.78.109:8080
192.163.221.191:8080
139.162.185.116:443
70.45.30.28:80
181.197.108.171:443
181.47.235.26:993
37.59.24.25:8080
143.95.101.72:8080

Epoch 3 - Spam C2s

41.185.29.128:8080
149.202.153.251:8080

Epoch 3 - Stealer C2s

178.63.78.150:8080
198.46.150.196:7080
178.32.255.133:443

Current Epoch 3 RSA Public Key

MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAMqZMACZDzcRXuSnj2OI8LeIYKrbUIXL
faUgIJPwYd305HnaBS2AfA0R+oPxT32r+3BbayI3KguqAn3E+rbwtLhqhOXOlTnY
7yvG4ufmwCCkRzc6Sq8baToxmd6y523AIQIDAQAB

Credits and Notes Section


WARNING - Some links may have been taken down shortly after I reported them to URLHaus.abuse.ch 
because they rock and report everything to ISPs as it is confirmed to be malware. Additionally, 
this list MAY include doc DL URLS from previous days, see the previous days here to get the full picture:
https://pastebin.com/u/jroosen
 
NOTE: The doc DL URLS are in alphabetical order now. The community lists below may contain content I do not have in my list.
I am providing them for your benefit in case you want to parse them to be sure.

What is Epoch 1, Epoch 2 and Epoch 3?


(09/17/19)
With the find of Epoch 3 that split from Epoch 1, this section will be rewritten to reflect these changes in time.

Community Lists/Samples

https://pastebin.com/eu4Bj1J6 - @executemalware
https://pastebin.com/bq3jTmhq - @Paladin3161


(sorry if we miss anybody, make sure to send it to @cryptolaemus1 in your tweet and we will try to include it!)

Credits

Combination work of the Cryptolaemus Team - https://paste.cryptolaemus.com/about/ and/or specifically the following:

Doc DL URLs - @devnullnoop, @p5yb34m, @malware_traffic, @dms1899, @Paladin3161

C2 info/RSA Keys - @CapeSandbox, @unixronin, @devnullnoop, @MalwareTechBlog, @lazyactivist192, @papa_anniekey, @Paladin3161,
@executemalware, @luc4m, @SecSome

Payloads - @devnullnoop, @MalwareTechBlog, @lazyactivist192, @p5yb34m, @malware_traffic, @Paladin3161, @ps66uk, 
@bomccss, @reecdeep, @CholeVallabh, @papa_anniekey, @JAMESWT_MHT, @executemalware, @SecSome, Anonymous :)

Spam Templates - @devnullnoop, @lazyactivist192, Anonymous :)

Special thanks to @lazyactivist192, @devnullnoop, @2sec4u, @unixronin, @pollo290987, @ps66uk for creating scripts/servers/
infrastructure and helping out with this!

Very special thanks to @Binary_Defense, @lazyactivist192, @capesandbox, @bigmacjpg and @decalage2 of the ViperMonkey Project
https://github.com/decalage2/ViperMonkey, @digitalocean, @mploessel, @anyrun_app, @unixronin, @hurricanelabs, @MalwareTechBlog,
@KryptosLogic, @0xtadavie, @MsftSecIntel, @abuse_ch/urlhaus.abuse.ch, @urlscanio, @BlackLotusLabs, @TrendMicro and @Virustotal
for providing services/software at no charge to this cause!

Daily Log 11/14/19

This report was gathered by @ps66uk and @jroosen.

@JRoosen here - Today was basically a carbon copy of yesterday for Emotet activity. Not really much different happened today
of note except for the loader changing the naming list again. The new name list is below in the loader report section.
Spam today seemed to be light to moderate. Lots of reply chain malspam and generic malspam on all 3 botnets. 

General News


@SethKingHi had some interesting observations about the Emotet packer leaving in function names again:
https://twitter.com/SethKingHi/status/1194849226166960129

@SethKingHi also posted his Yara rule which has been catching the all of the loaders from 2019/11/06 until present.
https://twitter.com/SethKingHi/status/1194904053433561088

He even updated it to reflect the recent changes that Ivan slipped in after 23:45UTC+:
https://twitter.com/SethKingHi/status/1195199399975981056

@Jan0fficial did his stats for our post yesterday:
https://twitter.com/Jan0fficial/status/1194893818677669889

@JayTHL has some food for thought on the shear number of sites involved in Emotet:
https://twitter.com/JayTHL/status/1194872011446771712

@JayTHL also did his daily summary of what is left up in Emotet land that was in our report:
https://twitter.com/JayTHL/status/1194869242958688256

Drops Report


Trickbot - gtag mor44 of course. Haven't seen anything like Dridex/Dreambot/QBot/Qakbot in weeks. Has anyone else?

Email Template Report


Many of the same templates in all different languages again.
 
Some notable things to possibly filter on with misspellings, grammatical errors and odd phrasing:
(I will keep adding to this over time)
"if order was not place, please contact us and obtain a proof of payment of who sign for order, dispute if necessary."
"Please be advised that the new problem has been appeared today."
"I have sent the new file in DOC format."
"Here all our documentation for our question."
"Here's another email below that i have to make a follow-up on request."
"I have finally been sent the new table-form, which is great. I forward it to you."
"Please sign, date, and email back as confirmation."
"Please find attached the check copy for payment."
"I have sent the new data in DOC format and the policy wording in DOC format to be even more professional than others :)"
"Is this one authorised? (Docs in attachment.)"
"Can you please look into this urgently and advise?"
"there is a older outstanding invoice, I have attached this invoice."
"I meant to send a doc before ,sorry."
"Thank you for your email. I have attached all the data."
"Please find attached the invoice and detailed charges for the month. If you have any questions please let me know."
"I have sent a request to add this information."

These are some old generic virus scanners that I think may no longer be valid:
"-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean."
"Message protected by MailGuard: e-mail anti-virus, anti-spam and content filtering."
"This email has been scanned by LANserve Email Defence. For more information please visit www.emergingit.com"

Paul's Boutique of Documents:
includes urlhaus report time

E1 CreateDate: 2019:11:14 06:38:00 www.uyghurchem.com          07:17   enable_edition
E2 CreateDate: 2019:11:14 06:05:00 sundeckdestinations.com     06:31   enable_edition
E3 CreateDate: 2019:11:14 06:03:00 jasaundanganonline.com      08:36   enable_edition

E1 CreateDate: 2019:11:14 10:03:00 abantesabogados.com         10:17   enable_edition
E2 CreateDate: 2019:11:14 10:23:00 www.assurpresse.com         10:46   enable_edition
E3 

E1 CreateDate: 2019:11:14 13:23:00 hopebuildersusa.com         13:44   enable_edition
E2 CreateDate: 2019:11:14 13:50:00 statisticsinabox.com        14:03   enable_edition
E3 CreateDate: 2019:11:14 13:27:00 sneakerstyle.top            14:06   enable_edition

E1 
E2 CreateDate: 2019:11:14 15:36:00 anovatrade-corp.org         16:17   enable_edition
E3 

E1 CreateDate: 2019:11:14 19:58:00 calamusonline.com           20:14   enable_edition
E2 CreateDate: 2019:11:14 19:48:00 seabobcuracao.com           20:06   enable_edition
E3 CreateDate: 2019:11:14 19:53:00 jjcardsandgifts.com         20:18   enable_edition
 
E1 CreateDate: 2019:11:14 23:11:00 inter-mvietnam.com          00:29   enable_edition
E2 CreateDate: 2019:11:14 23:18:00 www.hineniestetica.com.br   23:35   enable_edition
E3 


(These are experimental, use at your own risk.)

No document download links lately.

These were revived/updated:

These were not:
https?:\/\/.+?\/(administrator|academy|album_delete|alphabet|Apple\.secure|anywhereApi|articles|assets|backup|banners|beta|blogs|cache|calendar|cgi-bin|checkformats|cfm|clients|consultation|core|css|demo|discuss_lib|dhlupdate|direc|domains|emailstory|gallery|GoogleSpeech|health|hino|homepage|images|install.|.*\.init|js|lib|listselect|lm|menusa|newsletter\-.*|old|paclm|Pages|parts_service|phpmyadmin|pictures|popup_index|privacy-policy|public|rmareturns|rising_api|rssreader|sendlogin|shells|sites|sitemap|stats|test|trademark|themes|tmp|uploads|video|wc-logs|webalizer|wordpress|wp-admin|wp-content|wp-includes)\/([A-Za-z0-9|]{7,40})\/(\"|\n)
https?:\/\/.+?\/(AMAZON|Amazon)\/.+?\/([0-9\-_]{5,7})\/
https?:\/\/.+?\/([0-9a-z\-_]{3,11})\/([A-Z0-9]{7,32})\/([A-Za-z]{7,32})\/(\"|\n)
https?:\/\/.+?\/([A-Za-z0-9]{8,30})_([a-z0-9]{5,10})-([0-9]{8,15})\/
https?:\/\/.+?\/(Document|DOC|FILE|INC|LLC|Scan)\/([a-zA-Z0-9]{4,30})\/ 

Also keep in mind, your filter needs to look inside PDF files to find the URI to test against these above. Otherwise
this does not help.

Loader Report

Payloads and C2 report has been combined into this section and it is now known as the Loader Report.

EXE naming convention changed today 2019/11/14. The new names will be 2 of any of the following list of words:
texas,func,deploy,run,leel,stuck,def,print,hal,monthly,pdf,char,netsh,memo,trns,rds,maker,more,textto,
chunker,mailbox,compon,shades,scan,non,wsat,speed,publish,manual,hant,inbox,malert,zap,fill,angle,wrap,
boost,cors,iplk,sitka,wow,prints,acquire,wiz,smo,footer,attrib,group,appid,xcl,sensor,methods,ipmi,raw,
title,nic,ias,lua,dispid,special,serial,wsa,tcg,msp


E1 now 86 combos, was 83 for a net +3
E2 now 67 combos, was 68 for a net -1
E3 now 57 combos, was 55 for a net +2


E1 - j (7734)
00:00 -         172kb   7741   bcdbeeefecbc11b37d166ff319ee74bf069b30f133680f4739810fddf62bda3c
06:10 -         586kb   7746   a1849d2a1ef45a7840e4df06bbc8cb0615dc991ab1716e449623542b6541fb54
<= C2 change
08:00 - 14:45   288kb   7754   2bb46ad6a4d41a98226d8505db29cafece4a36c5c6d4463467165094c12ff1b3
15:50 -         174kb   7775   fa8af886a435fdac67f388cbe93a1987c322c9cb10a601bd04d63cafea5a895a
16:40 -         439kb   7778   9277d621e5ab55fde993cc8a4a6f5cfed4e89ea3f902d2016aff989e5f81a458
20:50           146kb   7795   2adaf1eb729f1ff065420448dfb43ec9292f4ae975c7d44d3f7da8870e655e87
23:15 -         381kb   

08:00
Old count: 83
New count: 86

Dropped:
42.190.4.92:443

Added:
107.170.27.84:443
96.20.84.254:7080
39.49.18.162:50000
187.230.99.192:443

-----

E2 - b (7735)
00:00 -         165kb   7740   d657a0bfdc81696723ea95425022a0b00dc955531603eca981b62b84b54b1dfc
06:10 -         579kb   7747   cf91e66ec5c2fce287625b56228e9f14d14273fd82a5dd38255d105bbcd61887
<= C2 change
08:00 - 14:45   281kb   7752   72e09f5d47a6bd4d9971e86e5e7315af75e01b2ad3cf2a991df7eb04c53aaa44
15:50 -         167kb   7773   d0ba244e6767ee2582d5b484af566d3f536fde890bae1f56c44d3a54b24a169f
16:40 -         423kb   7776   a1efde938cb577abf4e0fe7eefe75aff92dfe162394878de57d809453618e1ed
20:50 -         141kb   7794   302783ad06abbaa362c0cf1ec018f9cf13a72711ee9916ab1a8939e96aca49f0
23:15 -         373kb   

08:00
Old count: 68
New count: 67

Dropped:
212.71.234.16:8080
179.12.170.148:8080
171.101.153.86:990

Added:
144.76.56.36:8080
86.98.64.189:443

-----

E3 - f (7736)
00:00 -         161kb   7739   e15539f25a696a2cad632c532b637c4f9c67fd1ff8faf1cd2f813e42d37b4032
06:10 -         575kb   7745   b2d44b2b7d376a949851ec07dd76fe82f7f82735c601e0d08f111d2d31b41621
<= C2 change
08:00 - 14:50   277kb   7753   34eba5b9d04571c8dd5cfa6b5e66ac30d794683a4b283b2ace67bf9f8d3a23ab
15:50 -         163kb   7774   c31e28adcab942baf75ced181efb64d15fb71c0bb15c471c3e283c792184f30b
16:40 -         413kb   7777   1296d8774c5c1fdfd849570b8ed42dca035348e1d3f59a846c80f2c49a80db49
20:50 -         138kb   7796   966f0403c20df7e1e9668bfc9fb819077b4218e3790b70a3a675a628227ada67
23:15 -         368kb   

08:00
Old count: 55
New count: 57

Dropped:
81.2.235.48:443
187.147.152.244:8080
188.220.235.237:8080

Added:
105.226.188.128:8090
91.205.173.54:8080
163.172.97.112:8080
162.144.46.90:8080
195.201.56.68:7080

Closing


We have been doing this for over a year now as a team and I have to say it paid off to combine forces and 
fight Emotet. We appreciate all the support and likes we recieved in this thread from last night: 
https://twitter.com/Cryptolaemus1/status/1194860695629836288
We wanted to thank everyone for the kind words for us and support shown on our 1 year anniversary today.
All of the praise, stories and thanks mean a lot to us and I make sure to share it with the team! :)

PS. Ivan, we never got your congratulations but we know you were too busy to post. <3 

TT

Sandbox 11/14/19


E1 
https://capesandbox.com/analysis/7754/

E2
https://capesandbox.com/analysis/7752/

E3
https://capesandbox.com/analysis/7753/